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IN THE CLAIMS: 

Please amend claims 1-13 and add claims 14-20 as follows: 
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CLAIMS 

1 . (Currently Amended) A.^foiethod of storing encrypted data in a random acc e ss m emory^ 
comprising the steps of: 

in which data words, which e ach comprise a pr e d e termin e d numb e r of data bits, arc storabl e , 
charact e riz e d in that, before storag e , an encrvptieng of e ach data word by permutating each 
data bit of the data word using a permutation key to generate (M^ is e ff e cted wh e reby a 
permutated data word : and 

storing the permutated data word in the memor y (P) with a prodotormin e d numb e r of data 

bits is g e n e rated from e ach data word (M), or from a data word (M) deriv e d from this data word, 
by one - to - one p e rmutation of th e individual data bits (M[n 1] M[0]) using a first permutation 
k e y (Mp) . 

2. (Currently Amended) The M method of according to C claim 1, in which where after the 
step of permutating, further comprising the step of substituting each th e individual data bits 
(M[n - 1] - M[0]) of the permutated data word (Mp) are substituted b e for e storage u sing a fest 
substitution ke y to generate a substitute data word, and where the step of storing comprises the 
step of storing the substitute data word in the memor y in ord e r to provid e an e ncrypt e d data word 

3. (Currently Amended) The M method of according to C claim 1, where the step of 
encrypting further includes the step of substituting each data bit of the unencrypted data word 
using a substitution key prior to the step of permutating to generate a substitute data word, and 
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where the step of permutating comprises the step of permutating each data bit of the substitute 
data word using the permutation key to generate the permutated data word in which b e for e 
rearrang e ment the individual data bits of th e data word (M) ore substitut e d using a first 
substitution k e y (S) in ord e r to provide a substitut e d data word . 

4. (Currently Amended) The M method according to on e of th e foregoing claims_l, where m 
which the permutation key (P) has a numb e r includes a plurality of uniqu e subkeys (P[n 1] P[0]) 
corresponding to the number n -of the data bits of the data word, and where each one of the 
subkeys includes a pluraHty of key bits, where the step of permutating each data bit in the data 
word using a permutation key further comprises the steps of: 

assigning each one of the subkeys to a corresponding one of the data bits of the 

permutated data word: and 

ma pping each data bit of the xmencrypted data word to a corresponding one of the data 

bits of the permutated data word using the corresponding assigned subke y which subk e ys ar e 
assign e d to on e data bit e ach (Mp[n - l]"Mp[0]) of th e p e rmutat e d data word (Mp), and which 
e ach indicat e the data bit (M[n 1] M[0]) of th e data word to be p e rmutat e d (M), which data bit is 
to be mapp e d to this data bit (Mp[n 1] Mp[0]), wherein each subkey (P[n 1] P[0]) compris e s a 
number of key bits (P[n l,m 1] P[n l,0],P[k,m 1] P[k,0], P[0,m 1] P[0,0]) . 

5. (Currently Amended) The M method of according to Cc laim 4, where in which t he step of 
mapping comprises: of a data bit (M[n 1] M[0]) of the data word to be permutat e d (M) to a data 
bit (Mp[k]) of th e p e rmutated data word is e ff e ct e d incrementally using a subk e y (P[k]) by th e 
following steps: 
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a) selecting a first group of the data bits of the data word to be permutat e d (Mp) as 
determined by a first one of the plurality of key bits (P[lc,0]) of the corresponding assigned 
subkey-^PfkJ); 

b) selecting a second group of the data bits of the data word fi-om the first group of the 
data bits obtained by th e pr e vious s e l e ction as determined by a second one of the plurality of key 
bits (P[lc,l]) of the corresponding assigned subkey-4P|¥[4; and 

c) repeating step b), each time using an additional one of the plurality of k ey bi ts of the 
corresponding assigned subkey (P[k,2]...P[k,m - l]) until the re exists s e l e ct e d group compris e s 
only one remaining m efe-data bit of the data word, where the one remaining data bit w hieh 
corresponds to the data bit (Mp[lc]) of the data word mapped to e f-the corresponding data bit of 
the p ermutated data word-(Mp). 

6. (Currently Amended) The M method of according to Cc laim 5, where in which t he number 
of data bits contain e d in the second a -group of the data bits of the data word is reduced from on e 
st e p to th e n e xt b y a factor of 2two fi-om the number of data bits in the first group of the data bits 
of the data word, and where the number of data bits in each group of the data bits of the data 
word in each iteration of step c is reduced by a factor of two . 

7. (Currently Amended) The M method according to one of the for e going claims 2, where m 
which the first-substitution key (S) has a number includes a plurality of key bits (S[n 1]..>S[0]) 
corresponding to the number of data bits of the permutated e f-the-data word to be substitut e d 
(M^, where the step of substituting each data bit of the permutated data word using a 
substitution key further comprises the step of mapping wher e in each data bit of the permutated 
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data word to b e substitut e d (Mp) is mapped unchanged or inv e rted to a data bit (M'[n 1]...M'[0]) 
of the substituted data word fM^ - in one of an unchanged form and an inverted form as 
determined by the corresponding one of these key bits (S[n 1],..S[0]) . 

8. (Currently Amended) The M method according to one of the foregoing claims.!, in which 
th e p e rmutation k e y (P) and th e substitution k e y (S) are r e gen e rat e d before a rewriting to the 
memory after a d e letio n where the substitution key includes a plurality of key bits corresponding 
to the number of data bits of the data word, where the step of substituting each data bit of the 
data word using a substitution key further comprises the step of mapping each data bit of the data 
word to a data bit of the substituted data word in one of an unchanged form and an inverted form 
as determined by the corresponding one of the key bits . 

9. (Currently Amended) The M method according to on e of th e for e going claimsj,, further 
comprising the step of w hich in ord e r to genera tinge thee permutation key bv the (P) compris e s 
the following steps: 

a) randomly generating a sub-permutation-key and assigning the generated sub- 
permutation- key to a data bit position of the permutated data word; 

b) checking whether the generated sub-permutation-key has already been assigned to a 
gen e rated for anoth e r data b it position of the permutated data word, and retaining the generated 
sub-permutation-key as the assigned sub-permutation-key if the generated sub-permutation key i t 
has not yet been assigned to a data bit of the permutated data word g e n e rat e d, and rejecting th e 
g e nerat e d sub - p e rmutation - k e y if it has alr e ady b ee n g e n e rat e d : and 
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c) implementing steps a) and b) until a sub -permutation-k ev is as si gned g enerat e d to fef 
each data bit position of the permutated data word-(Mp). 

10. (Currently Amended) The M method of claim K further comprising the step of decrypting 
the stored permutated data word using a second permutation key matched to the permutation key 
used to generate the permutated data word according to on e of the for e going claims, in which a 
data word (M*), g e n e rat e d from a data word (M) using th e first k e y aft e r b e ing r e ad out from the 
m e mory, is p e rmutated in order to g e n e rate the data word using a s e cond p e rmutation key (P') 
which is match e d to th e first permutation key (P) . 

1 1 . (Currently Amended) A Q device that t e— encryp ts and/ decrypts a data word (M^ 
comprising h aying a predetermined number of data bits (M[n - 1], M[k], M[0]) , the w hi^i-deyice 
having h as-a permutation unit (1 4 ) with comprisin g th e following f e atur e s : 

—a plurality of d ata inputs that receive to supply the data bits (M[n - 1], M[k], M[0]) of the 
data word to be permutat e d (M) : and 

- outputs to supply th e data bits (Mp[n 1], Mp[k], Mp[0]) of a p e rmutated data word 
(Mp) of th e pr e d e t e rmin e d l e ngth (n); 

■ permutation k e y inputs to supply a p e rmutation key (P) which comprises a numb e r (n) 
of subk e ys (P[n l]... P[0]) corr e sponding to the number of data bits ; 

—a numb e r p lurality of selection units (1 4 _n - l, 1 4 _k, 1 4 0) corresponding to the number 
of data bits of the data word , wher e to which s e l e ction units each one of the selection units is 
responsive to a e ne-subkey portion of a permutation ke v e ach is assign e d , where each one of the 
selection imits and which p rovides one data bit each (Mp[n 1], Mp[k], Mp[0]) of athe permutated 
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data word ^Mfi> — from the corresponding data bit of the data word as determined by the 
corresponding one each of the subkeys (P[n 1]... P[0]) from th e data bits of th e data word to b e 
pormutat e d (M) , 

12. (Currently Amended) The S device of according to C claim 1 1 , where in which e ach of th e 
selection units (1 4 _k) comprises h as-a number of consecutively arranged selection stages 
(1 4 I n 1, 1 4 I k, 14 10) corresponding to athe number of permutation key bit s of the 
corresponding subkev for that selection unit , wherein a first selection stage (1 4 1_0) is design e d, 
is responsive to a first one of the permutation key bits as d e t e rmin e d by a first k e y bit (Pfk^OI), t o 
select and provide a first group of data bits of#e» the data wor d to bo p e rmutat e d (M) , and 
wherein subsequent ones of the selection stages (1 4 1_1, 141_2, 1 4 1_m - l) ar e d e signed, in e ach 
case as d e t e rmined by are each responsive to subsequent ones of the permutation key bitsa -j^ev 
bit (P[k,l], P[k,2], P[k,m - 1]), to select a subgroup of the data bits from athe group of data bits of 
the data word p rovided by the respective previous selection stage. 

13. (Currendy Amended) The S device of laccording to C claims 1 1 or 13 , further comprising a 
in which a substitution unit is-connected b e for e or after the permutation uni t (1 4 ) , thatwfeieh 
substitution unit substitutes each data bits (Mp[n 1], Mp[k], Mp[0]) of the permutated a -data 
word to b e substitut e d (Mp) as d e t e rmined by -in response to a substitution key-(S). 

14. (New) The device of claim 11, further comprising a substitution unit connected before 
the permutation unit, that substitutes each data bit of the data word in response to a substitution 
key. 
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15. (New) A method of storing encrypted data in a memory, comprising the steps of: 

encrypting a data word by permutating each data bit of the data word using a permutation 
key to generate a permutated data word; 

substituting each data bit of the permutated data word using a substitution key to generate 
a substitute data word; and 

storing the substitute data word in the memory. 

16. (New) The method of claim 15, where the permutation key includes a plurality of 
subkeys corresponding to the number of the data bits of the unencrypted data word, and where 
each one of the subkeys includes a plurality of key bits, where the step of permutating each data 
bit further comprises the steps of: 

assigning each one of the subkeys to a corresponding one of the data bits of the 
permutated data word; and 

mapping each data bit of the data word to a corresponding one of the data bits of the 
permutated data word using the corresponding assigned subkey. 

17. (New) The method of claim 16, where the step of mapping comprises the following 
steps: 

a) selecting a first group of the data bits of the data word as determined by a first one of 
the plurality of key bits of the corresponding assigned subkey; 
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b) selecting a second group of the data bits of the data word from the first group of the 
data bits as determined by a second one of the plurality of key bits of the corresponding assigned 
subkey; and 

c) repeating step b), each time using an additional one of the plurality of key bits of the 
corresponding assigned subkey until there exists one remaining data bit of the data word, where 
the one remaining data bit corresponds to the data bit of the data word mapped to the 
corresponding data bit of the permutated data word. 

1 8. (New) A method of storing encrypted data in a memory, comprising the steps of: 

substituting each data bit of an unencrypted data word using a substitution key to 
generate a substitute data word; and 

permutating each data bit of the substitute data word using a permutation key to generate 
a permutated data word; 

storing the permutated data word in the memory. 

19. (New) The method of claim 18, where the permutation key includes a plurality of 
subkeys corresponding to the number of the data bits of the substitute data word, and where each 
one of the subkeys includes a plurality of key bits, where the step of permutating each data bit 
further comprises the steps of: 

assigning each one of the subkeys to a corresponding one of the data bits of the substitute 
data word; and 

mapping each data bit of the substitute data word to a corresponding one of the data bits 
of the permutated data word using the corresponding assigned subkey. 
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20. (New) The method of claim 19, where the step of mapping comprises the following 
steps: 

a) selecting a first group of the data bits of the substitute data word as determined by a 
first one of the plurality of key bits of the corresponding assigned subkey; 

b) selecting a second group of the data bits of the substitute data word from the first 
group of the data bits as determined by a second one of the plurality of key bits of the 
corresponding assigned subkey; and 

c) repeating step b), each time using an additional one of the plurality of key bits of the 
corresponding assigned subkey until there exists one remaining data bit of the substitute data 
word, where the one remaining data bit corresponds to the data bit of the substitute data word 
mapped to the corresponding data bit of the permutated data word. 
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